Snort mailing list archives
oversize_chunk_encoding
From: "Sascha Hintz" <sascha.hintz () gmx net>
Date: Wed, 02 Jul 2008 09:53:09 +0200
Hey guys, i have two problems with my http_inspect configuration the first problem is that the preprocessor only accepts the default server configuration. I have added a special individual server configuration because is the firewall but with no affect. the second problem is how can i deactivate oversize_cunk_encoding ? preprocessor http_inspect: global \ iis_unicode_map unicode.map 1250 # preprocessor http_inspect_server: server default \ profile apache \ ports { 80 8080 } \ no_alerts # flow_depth 300 \ # ascii no \ # multi_slash no \ # chunk_length {50000 alert no } \ # apache_whitespace no \ # utf_8 no \ # non_strict \ # webroot no \ # no_alerts preprocessor http_inspect_server: server xx.xx.xx.xx profile all ports { 80 8080 } oversize_dir_length 500 no_alerts # ports { 80 8080 } \ # oversize_dir_length 500 \ # no_alerts # no_alerts # flow_depth 300 \ # ascii no \ # multi_slash no \ # chunk_length 1000000000000 \ # apache_whitespace yes \ # utf_8 no \ # non_strict \ # directory no Greetings Sascha -- Der GMX SmartSurfer hilft bis zu 70% Ihrer Onlinekosten zu sparen! Ideal für Modem und ISDN: http://www.gmx.net/de/go/smartsurfer ------------------------------------------------------------------------- Sponsored by: SourceForge.net Community Choice Awards: VOTE NOW! Studies have shown that voting for your favorite open source project, along with a healthy diet, reduces your potential for chronic lameness and boredom. Vote Now at http://www.sourceforge.net/community/cca08 _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- oversize_chunk_encoding Sascha Hintz (Jul 02)
- Re: oversize_chunk_encoding chris ryan (Jul 02)
- Message not available
- Message not available
- Re: oversize_chunk_encoding chris ryan (Jul 02)
- Message not available